HighFix available
adminer — security advisory
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
- Products
- adminer
- Affected versions
- 4.8.1-1, 4.8.1-2, 4.8.1-4, 5.1.0-1, 5.2.1+dfsg-1, 5.3.0+dfsg-1, 5.4.0+dfsg-1, 5.4.1+dfsg-1, 5.4.2+dfsg-1, 5.4.3+dfsg-1, 5.4.4+dfsg-1, 6.0.0-1, 6.0.1-1, 6.0.2-1, 6.1.0-1, 6.1.1-1, 6.1.2-1
- Fixed versions
- 4.8.1-4
- CVEs
- CVE-2023-45196
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 15:51 UTC · Revision 1
Source evidence
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
osv:DEBIAN-CVE-2023-45196
adminer
Fixed versions: Not specified
adminer
Fixed versions: 4.8.1-4
adminer
Fixed versions: 4.8.1-4
Complete source record
{
"id": "52ffe8b7a721475e60818ac33da3ac9fac5d37f0fd65eeef3e7d44f53cff09c2",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2023-45196",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2023-45196",
"summary": "Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.",
"evidence": "osv:DEBIAN-CVE-2023-45196",
"products": [
{
"name": {
"value": "adminer",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.8.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "4.8.1-2",
"evidence": "/affected/0/versions"
},
{
"value": "4.8.1-4",
"evidence": "/affected/0/versions"
},
{
"value": "5.1.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.2.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.3.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.2+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.3+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.2-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.8.1-4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "adminer",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.8.1-4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "DEBIAN-CVE-2023-45196",
"aliases": [
"DEBIAN-CVE-2023-45196"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"4.8.1-1",
"4.8.1-2",
"4.8.1-4",
"5.1.0-1",
"5.2.1+dfsg-1",
"5.3.0+dfsg-1",
"5.4.0+dfsg-1",
"5.4.1+dfsg-1",
"5.4.2+dfsg-1",
"5.4.3+dfsg-1",
"5.4.4+dfsg-1",
"6.0.0-1",
"6.0.1-1",
"6.0.2-1",
"6.1.0-1",
"6.1.1-1",
"6.1.2-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45196.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.8.1-4"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45196.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.8.1-4"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45196.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T18:02:08.842937698Z",
"provider": "osv",
"upstream": [
"CVE-2023-45196"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2023-45196"
]
},
"related_cves": [
{
"value": "CVE-2023-45196",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 455871,
"published_at": "2024-06-24T21:15:25.63+00:00"
}